Lucene search
Claudio VivianiPATCHSTACK:67D2BB861F517C57FEBE82DA77D8C8F7HistoryNov 05, 2014 - 12:00 a.m.
WordPress Compfight Plugin <= 1.4 - XSS
2014-11-0500:00:00
Claudio Viviani
patchstack.com
3
EPSS
0.001
Percentile
40.5%
This vulnerability is in the compfight-search.php. It allows authenticated users to inject arbitrary web script or HTML via the “search-value” parameter.
Solution
Update the plugin.
Related
prion
prion
Cross site scripting
2014-11-05 23:55:00
nvd
nvd
CVE-2014-8622
2014-11-05 23:55:02
cve
cve
CVE-2014-8622
2014-11-05 23:55:02
cvelist
cvelist
CVE-2014-8622
2014-11-05 23:00:00
wpvulndb
wpvulndb
Compfight < 1.5 Cross-Site Scripting (XSS)
2014-09-19 12:12:56